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(57) Abstract: A system, method and computer-readable media are disclosed for a security model and mode of enforcement in a 
graphics subsystem in a computing device. A uniform, streamlined, and flexible procedure for creating objects that contain their own 
security policies and are placed in protection domains when they are instantiated based on their specific security needs is described. 
A process boundary is utilized as the primary security or protection boundary for enforcing the security model. The security model 
takes advantage of the fact that most object models allow objects to have interfaces. An object's interfaces are used to determine 
what caller objects are capable of accessing. Thus, there is a mapping of an object's capabilities to interfaces. An object determines 
what a caller object is entitled to based on the investigation by the caller object and of what the caller object's knowledge of the 
object's interface. The caller's investigation determines what other aspects of the object the caller is entitled to. The method aspect 
of the invention comprises an interface of a target object receiving a call from an external object which is aware of the existence of 
the interface. At the target object, it is determined whether the external object has access to other interfaces of the target object based 
on the first call. Access is granted to other interfaces based on this determination. 
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